ZeusQA
Start free

Known exploited vulnerabilities

Zoho vulnerabilities attackers have used

Every Zoho vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 9 Zoho vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 2 used in ransomware campaigns. The most recent is CVE-2022-28810, added Mar 7, 2023. ManageEngine has the most entries (6).

In KEV, all time
9
Added, last 12 months
0
Used in ransomware
2
New CVEs this week
0

By product

ManageEngine (6), Desktop Central (1), ManageEngine ServiceDesk Plus (SDP) (1), ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus (1).

Every Zoho entry in CISA KEV

  1. CVE-2022-28810

    Added · due

    Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

    Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

  2. CVE-2022-47966

    RansomwareAdded · due

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

  3. CVE-2022-35405

    Added · due

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.

  4. CVE-2021-44515

    Added · due

    Zoho Desktop Central Authentication Bypass Vulnerability

    Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.

  5. CVE-2021-44077

    Added · due

    Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

  6. CVE-2021-37415

    Added · due

    Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

    Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

  7. CVE-2021-40539

    RansomwareAdded · due

    Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

    Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.

  8. CVE-2020-10189

    Added · due

    Zoho ManageEngine Desktop Central File Upload Vulnerability

    Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.

  9. CVE-2019-8394

    Added · due

    Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

    Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works